System for and methods of administration of access control to numerous resources and objects

Abstract

Described are systems and methods used for the administration of access control to numerous resources and objects. An administrator may control access to resources and objects in accordance with defined rules using an “object-centric” view. A template may be used for creating and managing access policies to large numbers of resources. The template may use parameters to define instances of a template. Parameters may be used to define variations of the template. Access privileges of a resources may be inherited in accordance with a hierarchy.

Description

[0001]This application claims priority to U.S. Provisional Application Ser. No. 60 / 302,181 filed Jun. 29, 2001, the contents of which are incorporated by reference in their entirety.FIELD OF THE INVENTION[0002]The present invention relates to the administration of computer system access control, and more specifically relates to controlling access to numerous computer resources and objects. Conventional access control systems and their associated methods of operation typically use a “user-centric” orientation. In contrast, the present invention adjudicates user requests from an “object-centric” orientation, specifically designed to address the need for access control to massively numerous computer resources and objects.BACKGROUND OF THE INVENTION[0003]Controlling access to an exponentially growing array of data by an increasing number of users represents one of the greatest challenges facing the future of the Internet. Access control and privilege management, no matter the form, pres...

AI Technical Summary

Benefits of technology

[0013]A first advantage of the present invention is that it provides a way to manage the complexity of a large number of resources.

[0014]A second advantage of the present invention is that it provides a way to associate and embed attributes and values with resources.

[0015]A third advantage of the present invention is that it provides a way to ease the complexity of a system for users with less advanced computer skills than those of programmers.

[0016]A fourth advantage of t...

Problems solved by technology

Controlling access to an exponentially growing array of data by an increasing number of users represents one of the greatest challenges facing the future of the Internet.

Access control and privilege management, no matter the form, presents a cumbersome issue for all types of businesses employing the Internet.

Typically, administration tools for access control focus only on the identity of accessors and associated policies, without allowing for massively scalable or sufficiently granular levels of information management.

The amount of data and resources in the next-generation Internet is expected to increase massivel...

Images